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In the Claims: 

1 . (Original) A method of forwarding a packet to a destinatioa compiising: 

exaimning a header of said packet to determine a private destination address; 

determining a private address of a private remote sub-endpoint of a tunnel, said private 
sub-endpoint being associated with said private destination address: 

determining a public address of a puhHc remote sub-endpoint of said tunnel; 

encapsulating said packet, resulting in an encapsulated packet, to indicate a public 
address of apublic local sub-endpoint of said tunnel as a source address and said public address 
of said public remote sub-endpoint of said tunnel as a destination address; and 

forvkrarding said encapsulated packet to a node in a carrier network. 

2. (Original) The method of claim 1 wherein said tunnel is a point to multipoint tunnel. 

3. (Previously Presented) The method of claim 1 wherein said determining said private 
address of said private remote sub-endpoint of said tunnel comprises consulting a routing table to 
discover an address associated with said private destination address of said packet. 

4. (Cuncndy Amended) The method of claim t wherein said deterenining said public 
address of said pubUc remote sub-endpoint of said tunnel comprises consulting a static address 
resolution protocol table to discover an address associated with said private address of said &st 
priv^ remote sub-endpoint of said tunnel. 

5. (Original) The method of claim 1 further comprising determining aprivate address of a 
first local sub-endpoint of said tunnel. 

6. (Previously Presented) The method of claim 5 wherein said detennining said private 
address of said first local sub-endpoint of said tunnel comprises consulting a forwarding table to 
discover an address associated with said private address of said private remote sub-endpoint of 
said tunnel. 

7. (Original) A carrier router comprising: 
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a backbone router including; 

a public network interface for connecling to a public data network; and 

a sub-endpoint for a tunnel having a network address in an address space of said 

public data network; and 

a customer virtual router including: 

a private network interfece for connecting to a private data network; and 

a sub-endpoint for said tunnel having a network address in an address space of 

said private data network. 

8. (Original) A carrier router comprising: 
a private network interface; 
a public network interface; 
a processor operable to: 

receive a packet at said private netwoik interfece; 

examine a header of said packet to determine a private destination address; 

determine a private address of a private remote sub-endpoint of a tunnel, said 
private sub end-point being associated with said private destination address; 

determine a pubhc address of a public remote sub-endpoint of said tunnel; 

encapsulate said packet, resulting in an encapsulated packet, to indicate a public 
address of a public local sub-endpoint of said nmnel as a somce address and said public 
address of said public remote sub-endpoint of said tunnel as a destination address; and 

forward said encapsulated packet to a node in a public network via said public 
network interface. 

9. (Currently Amended) A computer readable medium containing computer executable 
instructions which, when performed by a processor in a carrier router, cause the processor to: 

examine a header of said a packet to determine a private destination address; 

detennine a private address of a private remote sub-endpoinl of a tunnel, said private sub- 
endpoint being associated with said private destination address; 

determine a publ ic address of a public remote sub-endpoint of said tunnel; 
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encapsulate said packet, resulting in an encapsulated packet, to indicate a public address 
of a public local sub-endpoint of said lomncl as a source ad dress and said public address of said 
public remote sub-endpoint of said tunnel as a destination address; and 

forward said encapsulated packet to a node in a carrier network. 

10. (Original) A method of receiving a packet, said packet having public source and 
destination addresses and private source and destination addresses, said method comprising; 

receiving said packet from a node in a carrier data network; 

forwarding said packet to a first tunnel sub-endpoint having said pubUc destination 
address; 

at said first tunnel sub-endpoint, removing said public source and destination addresses 
fix^m said packet; 

forwarding said packet to a second tunnel sub-endpoint; and 

at said second tunnel sub-endpoint, forwarding said packet to a device having said private 
destination address. 

1 1 . (Currently Amended) A computer readable medium containing computer-executable 
instructions ^ch process a nacket having publi c source and H^stination addresses and p rivate 
source and destination autoes which, when perfonned by a processor in a carrier router, cause 
the processor to: 

receive said packet from a node in a carrier data network; 

forward said packet to a first tunnel sub-endpoint having said public destination address; 
at said fnrst tunnel sub-endpoint, remove said public source and destination addresses 
fix)m said packet; 

forward said packet to a second tunnel sub-endpoint; and 

at said second tumiel sub-endpoint, feiaeve forward said packet to a device having said 
private address. 

12-16. (CanceUed). 
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